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(54) AUTHENTICATION SYSTEM AND PUBUC KEY MANAGEMENT SYSTEM 

(57)Abstract 

PROBLEM TO BE SOLVED: To authenticate an 
individual on-line and to make only the individual able to 
abandon and update a public key by executing a 
unidirectional function to a terminal software prior to the 
start of communication and transmitting a calculated 
result to a host side by a terminal side and collating the 
calculated result with a true value and detecting whether 
or not the terminal software is altered by a server side. 
SOLUTION: A terminal software 3A substitutes a 
terminal software 3A to a secure hash function and 
transfers the calculated result to an authentication 
server 4. An authentication server 4 compares the 
received calculated result with a stored value, and when 
they match, judges that the alteration of a third person 
does not reach the terminal software 3A and shifts to 
the processing of authenticating whether or not a person 
requesting the abandonment of the public key is a true 
owner. The true owner is authenticated by transmitting a 
'seed' to the terminal software 3A. Thus, even in the 

case that a secret key is stolen, only the individual is surely authenticated and the public key is 
safely and quickly abandoned. 
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